Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203231383539.roa
File: 38302e37352e3232312e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: hp1lvRjHPKUmNIkMM5FwMB/BmMF+9kJ0TZvH43DiJyE=
Subject key identifier: 7C:3D:83:5D:35:31:A2:A1:CE:2C:48:FF:07:8B:E0:B3:E3:44:4C:0F
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 6A747F63A8C7386A5815D3DF4DACC86FD2B69CEE
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203231383539.roa
Signing time: Thu 18 Jan 2024 13:26:44 +0000
ROA not before: Thu 18 Jan 2024 13:21:44 +0000
ROA not after: Thu 16 Jan 2025 13:26:44 +0000
asID: 21859
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:74:7f:63:a8:c7:38:6a:58:15:d3:df:4d:ac:c8:6f:d2:b6:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Jan 18 13:21:44 2024 GMT
Not After : Jan 16 13:26:44 2025 GMT
Subject: CN=7C3D835D3531A2A1CE2C48FF078BE0B3E3444C0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:09:a8:54:0d:00:c0:8b:9e:83:8c:04:54:
6f:b5:04:5b:57:2b:da:df:97:ec:ad:0f:96:63:62:
d1:af:ad:91:f6:b0:57:d5:f7:94:74:6a:c8:b7:48:
56:b5:8d:96:d0:1e:14:2f:05:8a:3c:16:78:76:a0:
94:5e:34:79:bd:37:b0:58:5b:0c:cf:38:8f:5c:34:
6c:99:2e:98:9a:8d:aa:46:79:ae:cc:49:ed:15:e2:
25:4f:73:b4:3a:2d:88:61:5d:61:c8:89:fb:39:d6:
ac:11:11:2e:90:dc:6b:f2:41:25:6b:53:a1:8f:aa:
d3:2d:32:eb:74:ed:09:46:d7:33:e8:b0:bb:a6:f7:
15:9f:55:74:76:74:0e:6f:9f:da:c5:73:38:f8:c5:
e4:7f:cf:ab:fe:af:a4:3d:4d:54:11:34:22:2c:5f:
bc:64:53:0c:f6:f2:39:63:32:98:34:40:51:7a:eb:
66:83:c8:ab:18:fe:46:c7:1f:31:1a:36:85:b1:ad:
ae:4c:ba:96:ee:c5:f2:c9:b7:28:5e:17:93:52:7c:
d6:87:ee:4e:ae:11:36:98:7e:fc:46:b1:9f:e1:f0:
cb:ee:85:99:0c:91:3b:9e:2e:93:4c:86:32:52:70:
3b:05:d8:ae:26:dc:e7:c2:73:52:7c:66:23:28:e3:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:83:5D:35:31:A2:A1:CE:2C:48:FF:07:8B:E0:B3:E3:44:4C:0F
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c5:be:a5:06:29:96:5f:66:8a:f8:72:cb:30:a4:66:8a:89:
e4:f0:66:a8:97:12:68:d8:a8:db:f7:66:24:e1:6c:90:41:22:
bd:c6:ed:42:27:e8:d8:fa:a4:93:6c:ac:5a:10:17:03:66:76:
db:d2:66:14:4b:aa:18:8f:d8:04:66:f5:63:d0:f0:e7:f6:1d:
2b:00:01:94:7f:11:d0:81:3a:e5:cd:a1:9f:1d:c4:4a:a5:73:
3f:27:4e:34:1d:c6:26:b6:07:10:cc:7b:6e:61:76:62:bc:f9:
db:f9:fb:fe:b6:c3:0e:4d:4d:58:a5:34:0c:a3:31:db:ba:b6:
bf:dd:1d:30:95:50:60:c2:5c:56:da:b4:30:80:be:37:4f:ba:
7b:08:94:21:0d:3a:91:9a:1a:31:e1:c4:cd:23:33:16:e1:c0:
29:78:25:df:2f:54:0d:7e:61:fa:b3:8b:e0:3f:ec:42:fb:ed:
0d:50:ce:f4:8d:05:5c:cd:aa:c8:6d:1e:eb:e1:43:10:1f:da:
78:85:a9:ad:bf:1b:59:28:23:de:bb:b4:d9:2e:db:d1:5c:61:
92:5f:38:7c:1b:1b:df:e5:5d:43:3e:3b:56:d8:20:86:fe:cb:
89:15:4f:b2:79:9c:69:49:12:4f:3c:3c:8e:2e:52:99:a0:98:
e3:8f:aa:5e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUanR/Y6jHOGpYFdPfTazIb9K2nO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFjZDJkNTE5MjJiMmUxNjEyZTVmODJjMzk0ZjJkMTk4
MDBkMWRkZjAeFw0yNDAxMTgxMzIxNDRaFw0yNTAxMTYxMzI2NDRaMDMxMTAvBgNV
BAMTKDdDM0Q4MzVEMzUzMUEyQTFDRTJDNDhGRjA3OEJFMEIzRTM0NDRDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXwmoVA0AwIueg4wEVG+1BFtX
K9rfl+ytD5ZjYtGvrZH2sFfV95R0asi3SFa1jZbQHhQvBYo8Fnh2oJReNHm9N7BY
WwzPOI9cNGyZLpiajapGea7MSe0V4iVPc7Q6LYhhXWHIifs51qwRES6Q3GvyQSVr
U6GPqtMtMut07QlG1zPosLum9xWfVXR2dA5vn9rFczj4xeR/z6v+r6Q9TVQRNCIs
X7xkUwz28jljMpg0QFF662aDyKsY/kbHHzEaNoWxra5MupbuxfLJtyheF5NSfNaH
7k6uETaYfvxGsZ/h8MvuhZkMkTueLpNMhjJScDsF2K4m3OfCc1J8ZiMo44GZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfD2DXTUxoqHOLEj/B4vgs+NETA8wHwYDVR0j
BBgwFoAUSs0tUZIrLhYS5fgsOU8tGYANHd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJlMzBmNmYtYTMzMi00OWFkLTg2OGUtZjM4ZWQzYTcy
NjAzLzAvNEFDRDJENTE5MjJCMkUxNjEyRTVGODJDMzk0RjJEMTk4MDBEMURERi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NzMHRVWklyTGhZUzVmZ3NPVTh0R1lB
TkhkOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzJlMzBmNmYt
YTMzMi00OWFkLTg2OGUtZjM4ZWQzYTcyNjAzLzAvMzgzMDJlMzczNTJlMzIzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBL
3TANBgkqhkiG9w0BAQsFAAOCAQEANMW+pQYpll9mivhyyzCkZoqJ5PBmqJcSaNio
2/dmJOFskEEivcbtQifo2Pqkk2ysWhAXA2Z229JmFEuqGI/YBGb1Y9Dw5/YdKwAB
lH8R0IE65c2hnx3ESqVzPydONB3GJrYHEMx7bmF2Yrz52/n7/rbDDk1NWKU0DKMx
27q2v90dMJVQYMJcVtq0MIC+N0+6ewiUIQ06kZoaMeHEzSMzFuHAKXgl3y9UDX5h
+rOL4D/sQvvtDVDO9I0FXM2qyG0e6+FDEB/aeIWprb8bWSgj3ru02S7b0Vxhkl84
fBsb3+VdQz47Vtgghv7LiRVPsnmcaUkSTzw8ji5SmaCY44+qXg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org